Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About cmiarshvac
cmiarshvac
Getting noticed
Member since Nov 30, 2017
2 weeks ago
Kudos given to
Community Record
46
Posts
4
Kudos
0
Solutions
Badges
4 weeks ago
I *think* I have a pathway to manually upgrade the agent. Does anyone know what happens when a newer agent is deployed to a machine with an older agent installed and running? Overwrite or install side-by-side?
... View more
4 weeks ago
I have a Windows Endpoint where the current Agent firmware version is 3.0.2. It has been offline for several months and is not coming back online regularly. My EDR sensor is seeing a lot of process creates from m_agent_upgrade.exe . Agent version isn't being upgraded. The minimum network version I can set to is 3.7.x. I am looking for confirmation that I this agent won't be able to upgrade based on how old it is and the new target version. I am thinking I need to attempt to redeploy with a newer agent version.
... View more
Labels:
- Labels:
-
Monitoring
-
Other
Sep 11 2023
8:59 AM
In System Manager, I check the device box and go to Command>Unenroll Device but I get a pop-up that says "No Eligible Unenroll Devices Selected". This is a Win10 that had both MDM and Agent installed. Could it be that the MDM profile is removed but the agent is still installed? What are my options for removing this device from System Manager?
... View more
Oct 28 2022
12:38 PM
I am in System Manager>Devices>[MY DEVICE] and I am trying to edit/add tags. I can added the tags and the Cancel/Save pop-up appears. When I click Save, it gets stuck. Inspection/Console tab shows the Uncaught TypeError below. Happens in Old and New Version of Devices views. Firebox or Chromium based browsers. devices2:11 Uncaught TypeError: Cannot read properties of undefined (reading 'id') at pcc.devices2.bundle.min.js:2:3787301 at mkiredux.bundle.min.js:2:501795 at Object.updateDevice (pcc.devices2.bundle.min.js:2:3669915) at ft.checkNetworkAndSubmit (pcc.devices2.bundle.min.js:2:3665704) at pcc.devices2.bundle.min.js:2:3666108 at Object.s (mkiredux.bundle.min.js:2:364917) at f (mkiredux.bundle.min.js:2:365060) at mkiredux.bundle.min.js:2:365206 at v (mkiredux.bundle.min.js:2:365292) at st (mkiredux.bundle.min.js:2:380808) at at (mkiredux.bundle.min.js:2:380618) at ut (mkiredux.bundle.min.js:2:380974) at ht (mkiredux.bundle.min.js:2:382181) at j (mkiredux.bundle.min.js:2:478983) at B (mkiredux.bundle.min.js:2:366615) at Zt (mkiredux.bundle.min.js:2:388139) at Xt (mkiredux.bundle.min.js:2:387356) at t.unstable_runWithPriority (mkiredux.bundle.min.js:2:511280) at Hi (mkiredux.bundle.min.js:2:409681) at M (mkiredux.bundle.min.js:2:478760) at Qt (mkiredux.bundle.min.js:2:387172) at HTMLDocument.i (mkiredux.bundle.min.js:2:186718) at HTMLDocument.nrWrapper (devices2:11:29834)
... View more
Dec 24 2020
10:34 AM
I have added a new network with my new Z3 sec appliance. I cloned a configuration from an existing Z1. I am finding that making changes to the configuration is more difficult than setting up from scratch. Can any tell me how to remove the cloned configuration that has been applied? I tried to remove the device and add to the network again but it comes back with the configuration. Thank in advance.
... View more
Jul 26 2019
6:40 AM
I do have VLANs. And It does seems to make sense to use GP for them and keep the main Network rules small and clear. As I think thru this, my biggest fear is managing the different VLAN rule sets and repeating between them. I feel like managing multiple rules sets might be hard. The first thing that comes to mind is building a tool to compare rules between the Group Polices to make sure that I have added or removed from all policies as appropriate. Does something like this already exist?
... View more
Jul 26 2019
6:34 AM
I saw this in a community thread. It is definitely one of the features I am concerned about. Specifically creating a "deny" on the Network that kills a response from an allowed request. Am I right to be concerned about a lot of potential tail chasing?
... View more
Jul 25 2019
8:13 AM
Before I jump in an create a big mess, I wanted to ask the Community if there are some best practices for using an MX's L3 firewall rules (of which I have many) in conjunction with some Group Policy Layer 3 Rules. For the most part, I can keep them separated and clean by using the Group Policies how they were intended. To target specific types of users (Guests) and devices. However, I would like to start using the API to programmatically update IP Blacklists for all users and devices. From my reading, this seems to be easiest via Group Policy L3 Firewall API call. Please let me know if I am missing something or reading this wrong. I have a vision of my future where I am trying to troubleshoot blocked traffic and I am bouncing between the "Network" L3 rules and GP rules and getting wires crossed (figuratively of course). I understand this is a broad question, just looking for $.02 from your experience or ideas to keep the thinking clean.
... View more
May 9 2019
7:46 AM
This is an older org and I have been receiving similar Summary Report messages with data for 5-6 months. Per your suggestion, I contacted support and while I haven't seen a case summary showing "what was broken", the problem seems to be resolved and all is back to normal.
... View more
May 3 2019
7:55 AM
Hey all, Something strange happened today. My organizational summary report email had some mismatched data. Did anyone else experience this? In addition to the Data Transfer numbers being null the "Unique Clients" and "Average Usage Per Client" are also zero. Should I look deeper into this?
... View more
Mar 4 2019
4:13 PM
Not sure about whitelist urls but Apple has some guidance on using the services you mentioned behind a firewall. https://support.apple.com/en-us/HT202078 This would be more for your Layer 3 Firewall rules.
... View more
Jan 31 2019
9:12 AM
1 Kudo
I did attempt to add the "startingAfter=<yesterday's timestamp>" to the client request query string. For my test, it only return events "after" the supplied timestamp. This will work for my use case. Thanks again to all for the help.
... View more
Jan 30 2019
11:28 AM
Thank you for investigating and the detailed confirmation.
... View more
Jan 30 2019
9:34 AM
Sorry, the timestamp I used in my question was today's time. I was using that to illustrate the "form". Actual data is more like: 1531233271.311001
... View more
Jan 30 2019
9:03 AM
I am using the datetime module in Python 3.7, Here is the parse and conversion: timest = (str(i.get('occurredAt')).split('.'))[0] newtime = datetime.datetime.fromtimestamp(int(timest))
... View more
Jan 30 2019
8:21 AM
--Updating to include actual timestamp from response-- I am making an API call using this structure: "GET/networks/[networkId]/clients/[id_or_mac_or_IP]/events" In my responses, the 'ocurredAt' is in the form: 1531233271.311001 I am assuming that this is an Epoch timestamp with extra precision after the '.' Based on that assumption, I am running a timestamp conversion using only the integer before the '.' When I do this, my dates are 6 months old. Am I not parsing this correctly or does the events endpoint return data oldest -> newest? If so, is there a some parameter that will give me newest first? I don't see a timespan option in the API docs. As always, all help is appreciated.
... View more
Labels:
- Labels:
-
Dashboard API
Jan 3 2019
10:15 AM
Dain, Thank you. These are exactly the type of resources I was looking for. I appreciate the help. Keep me posted on your progress for your lab setup, I am always looking to contribute if would like help. Chad This is me on github: https://github.com/chadmando
... View more
Dec 31 2018
2:56 PM
1 Kudo
Just seeing if anyone if forwarding their MX logs to Logstash ->Elastic. I am looking at writing the filters for MX logs but I don't want to reinvent the wheel. Did a quick google/github search and didn't see anything obvious. I am just playing with the SOF-ELK VM ( https://github.com/philhagen/sof-elk ) and it doesn't parse the Host name or other message date with an available filter. Thoughts are welcomed on any experience on this topic.
... View more
Labels:
- Labels:
-
Code Sample
Nov 7 2018
2:36 PM
I was looking into this again, I thought I had deleted the static route. I hadn't. Now it is removed and all my problem is fixed. Thanks to all for helping me through this user-generated problem.
... View more
Oct 29 2018
9:36 AM
Nolan, I am taking a look at any rules that might be affecting this. Thanks for the reply and verification on your end.
... View more
Oct 25 2018
7:28 AM
Nolan, Thanks for the reply. Tried incognito and it still directs me to the #connection page.
... View more
Oct 23 2018
1:28 PM
Deleted Static Route. No luck on reaching upstream. Am I missing a configuration setting for this #connection status page?
... View more
Oct 23 2018
12:59 PM
I know I have seen this answer in the community before but I cannot find the thread so here is a repost. I have a Z1, serving a 192.168.100.0/24 network The Z1 is downstream from my ISP modem/router serving a 192.168.1.0/24 (Z1 has the address 192.168.1.16) My laptop on the Z1's subnet (192.168.100.X) and I want to view the upstream router's web page (192.168.1.1) When I try to get to that address in my browser, I get a #connection status page for the Z1. I added a static route which, in my mind, says to get to the 192.168.1.0/24 subnet, go through the gateway. I was thinking that I really didn't need it because any unresolved addresses should go there anyway. Can someone please clear up my thinking here. What am I missing? As always, all help is appreciated. I have a feeling I am missing something fundamental here. #connection page static route
... View more
Oct 16 2018
9:32 AM
I do have the Advanced Security license enabled. Had to double check 🙂
... View more
Oct 16 2018
9:26 AM
I do have both of the Malware alerts available it the Alerts section.
... View more
Kudos given to
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 5712 | |
| 1 | 8957 | |
| 1 | 87518 | |
| 1 | 87549 |
© 2024 Cisco Systems, Inc.
